Simulation systems online

KNOW THE THREAT.
COUNTER THE THREAT.

Every phishing attack is a bet that you won't look twice. Learn to see the hook before it sets — and the outcome stops being the attacker's to decide.

Start the training — freeTake the 60-second drill
  • NO SIGNUP
  • RUNS IN YOUR BROWSER
  • NOTHING LEAVES YOUR DEVICE
Live
WATCHQR-code phishing aimed at delivery and logistics staffWATCHMFA-fatigue push bombing paired with fake IT helpdesk callsADVISORYFake DocuSign login pages harvesting Microsoft 365 credentialsTRENDDeepfake voice calls reinforcing fraudulent payment requestsWATCHTurnkey invoice-fraud kits circulating on TelegramTRENDHijacked reply chains — the phish arrives inside a real threadWATCHQR-code phishing aimed at delivery and logistics staffWATCHMFA-fatigue push bombing paired with fake IT helpdesk callsADVISORYFake DocuSign login pages harvesting Microsoft 365 credentialsTRENDDeepfake voice calls reinforcing fraudulent payment requestsWATCHTurnkey invoice-fraud kits circulating on TelegramTRENDHijacked reply chains — the phish arrives inside a real thread
System modules
Free · certification path$ ./phishing_analyst --start

PHISHING ANALYST

Eight blocks on how scams are actually built — the inbox, the fake call, the QR trap, the stolen account — each closed by an exam you cannot bluff. Finish it and the certificate is verifiable, because the score behind it is real.

Start the path — free~2 HOURS · SAVE AND RESUME ANY TIME
$ ./drill --quick

DRILLS

Sixty-second scenarios pulled from live attacks. Score yourself before someone else does.

ENTER→
$ cat threats/

THREAT LIBRARY

Every scheme running in the wild right now — how it is built, and where its seams show.

ENTER→
$ deploy_defense.sh

FOR TEAMS

Org-wide drills, awareness training and the paperwork NIS2 asks for. Start with a free exposure report.

ENTER→
Anatomy of a lure

Nothing here is hidden. That is the point.

Every tell in this message was visible to anyone who slowed down for three seconds. Tap one — in the message or in the list — and see what it was signalling.

SPECIMEN · CAPTURED IN THE WILD
FROM
SUBJUnusual sign-in activity —

We detected a sign-in to your account from an unrecognised device in Lagos, Nigeria. For your protection, some features have been limited until your identity is re-verified.

Verify my account

Button target:

Five tells in one message. Real ones rarely show more than two.

Train it
8 + 3modules

learning blocks and checkpoint exams on the Phishing Analyst path

100%

free — no signup, no upsell, everything runs inside your browser

80% or nothing

the pass mark. The certificate is earned, never bought

Prefer to read first?

Everything condensed into one download. No account, no email gate.

Get the free anti-phishing guide (PDF)
For teams

Your weakest link is one bad afternoon away from clicking.

A simulated campaign, the full training path for every employee, and a written record you can file against the NIS2 training requirement. Three to four weeks, fully remote. Start with a free report on what your company already leaks in public — no call, no obligation.

Get the free exposure report